PkgRadar

npm · registry.npmjs.org

xiaoye-components

Large Javascript Payload: 3859644 bytes

Why PkgRadar flagged 0.5.1

SeveritySignalEvidence
mediumLarge Javascript Payload3859644 bytes · package/dist/index.js

Scanned versions

VersionVerdictScoreScanned (UTC)
0.5.1Review102026-05-24
1.0.0Review102026-05-24

Block this in CI

PkgRadar gates xiaoye-components (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
xiaoye-components — npm security scan | PkgRadar